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I hereby certify that this correspondence Is being deposited with the U.S. Postal 
Service with sufficient postage as First Class Mail, in an envelope addressed to: 
MS Amendment, Commlssbner for Patents. P.O. Box 1450, Alexandria. VA 





IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



In re Patent Application of: 
Robert J. Donaghey 



Application No.: 10/058442 



Confirmation No.: 5927 



Filed: January 28, 2002 



Art Unit: 2661 



For: 



SYSTEMS AND METHODS THAT 



Examiner: Not Yet Assigned 



IDENTIFY NORMAL TRAFFIC DURING 
NETWORK ATTACKS 



SUPPLEMENTAL INFORMATION DISCLOSURE STATEMENT OPS) 

MS Amendment 
Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 

Dear Sir: 

Pursuant to 37 CFR 1 .56, 1 .97 and 1 .98, the attention of the Patent and Trademark Office 
is hereby directed to the references listed on the attached PTO/SB/08. It is respectfully 
requested that the information be expressly considered during the prosecution of this application, 
and that the references be made of record therein and appear among the "References Cited" on 
any patent to issue therefirom. 

This Supplemental Information Disclosure Statement is filed before the mailing date of a 
first Office Action on the merits as far as is known to the undersigned (37 CFR 1.97(b)(3)). 

Applicant has not submitted copies of each cited U.S. patent and U.S. patent application 
as required by 37 CFR 1.98(a)(2)(i), amended October 2004, as the U.S. Patent and Trademark 
Office has waived this requirement for all U.S. patent applications. Applicant submits herewith 
copies of non-patents in accordance with 37 CFR 1.98(a)(2). 

In accordance with 37 CFR 1.97(g), the filing of this Supplemental Information 
Disclosure Statement shall not be construed to mean that a search has been made or that no other 
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material information as defined in 37 CFR 1.56(a) exists. In accordance with 37 CFR 1.97(h), 
the filing of this Supplemental Information Disclosure statement shall not be construed to be an 
admission that any patent, publication or other information referred to therein is "prior art" for 
this invention unless specifically designated as such. 

It is submitted that the Supplemental Information Disclosure Statement is in compliance 
with 37 CFR 1.98 and the Examiner is respectfully requested to consider the listed references. 

The Director is hereby authorized to charge any deficiency in the fees filed, asserted to 
be filed or which should have been filed herewith (or with any paper hereafter filed in this 
application by this firm) to our Deposit Account No. 18-1945, under Order No. BBNT-P02-369. 

Dated: October 25, 2005 Respec^ffilly submitted, / 




registration No.: 54,130 
ROPES & GRAY LLP 
One International Place 
Boston, Massachusetts 02110-2624 
(617) 951-7000 
(617) 951-7050 (Fax) 
Attorneys/Agents For Applicant 
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INFORMATION DISCLOSURE 
STATEMENT BY APPLICANT 

(Use as many sheets as necessary) 


Complete if Known 


Application Number 


10/058442 


Filing Date 


January 28, 2002 


First Named Inventor 


Robert J. Donaghey 


Art Unit 


2661 


Examiner Name 


Not Yet Assigned 


Sheet 1 of 1 


Attorney Docket Number 


BBNT-P02-369 



U.S. PATENT DOCUMENTS 


Examiner 
Initiats* 


Cite 


Document Numt)er 


Publication Date 
MM-DD-YYYY 


Name of Patentee or 
Applicant of Cited Document 


Pages. Columns, Lines, Where 
Relevant Passages or Relevarrt 
Figunes Appear 


Number-Kind Code^ ( known) 




AA* 


US-6,578,147 


06-10-2003 


Shanklin et a! 






AB* 


US-6,321,338-B1 


11-20-2001 


Porras et al 






AC* 


US-6,484,203-B1 


11-19-2002 


Porras et ai 






AD* 


US-2003/0051026-A1 


03-13-2003 


Carter et al 






AE* 


US-6.028,626 


02-22-2000 


Aviv, David G. 





FOREIGN PATENT DOCUMENTS 


Examiner 
Initials* 


Cite 
No.^ 


Foreign Patent Document 


Publication 
Date 
MM-DD-YYYY 


Name of Patentee or 
Applicant of Cited Document 


Pages. Columns. Lines, 
Where Relevant Passages 
or Relevant Figures Appear 




Country Code'-NumbeK*-Klnd Code^ (if known) 

















'EXAMINER: Initial If reference considered, whether or not citation Is in confbnnance with MPEP 609. Draw line through citation if not in conformance and not 
considered. Include copy of this fomi with next communication to applicant. • CrTE NO.: Those application(s) which are mar1<ed with an single asterisk (*) next 
to the Cite No. are not supplied (under 37 CFR 1 .98(a)(2)(iii)) because that application was filed after June 30, 2003 or is available in the IFW. ^ Applicanfs 
unique citation designation number (optional). ^ See Kinds Codes of USPTO Patent Documents at www.usDto.aov or MPEP 901.04. ^ Enter Office that issued 
the document, by the two-letter code (WlPO Standard ST.3). * For Japanese patent documents, the indication of the year of the reign of the Emperor must 
precede the serial number of the patent document. * Kind of document by the appropriate symbols as indicated on the document under WlPO Standard ST.16 if 
possible. Applicant is to place a check mark here if English language Translation is attached. 



NON PATENT LITERATURE DOCUMENTS 


Examiner 
Initials 


Cite 


Include name of thie author (in CAPITAL LETTERS), title of the article (when appropriate), title of the item (tx)ok, 
magazine, journal, serial, symposium, catalog, etc.), date, page(s), volume-Issue number(s). publisher, city 

and/or country where published. 


T^ 




CA 


Schuba et al. Analysis of a Denial of Service Attack on TCP. Proceedings of the 1997 IEEE 
Symposium on Security and Privacy. (1997) 






CB 


Denning, Dorothy E. An Intrusion-Detection Model. IEEE Transactions on Software 
Engineering, pp. 118-31 (1987) 






CC 


Jha et al. Markov Chains, Classifiers, and Intrusion Detection. Computer Security 
Foundations Workshop. Proceedings, 14th IEEE, pp. 206-19, (2001) 






CD 


Vigna etaL NetSTAT: A Network-based Intrusion Detection Approach. ACSAC (1998) 






CE 


Stalllngs. William. Cryptography and Network Security: Principles and Practice. 2nd ed., 
Prentice Hall, pp. 478-501 (1998) 





•EXAMINER: Initial If reference considered, whether or not citation is In conformance with MPEP 609. Draw line through citation if not in conformance and not 
considered. Include copy of this form with next communication to applicant. 

'Applicanfs unique citation designation number (optional). 'Applicant is to place a check mark here if English language Translation is attached. 
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PTO/SB/92 (09-04) 
Approved for use through 07/31/2006. 0MB 0651-0031 
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Application No. (if known): 10/058442 



Attorney Docket No.: BBNT-P02-369 



Certificate of IVIailing under 37 CFR 1.8 



I hereby certify that this con-espondence is being deposited with the United States Postal Service 
with sufficient postage as first class mail in an envelope addressed to: 



MS Amendment 
Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 



on 



October 25. 2005 



Date 




Signature 
Joanne Ryan 



Typed or printed name of person signing Certificate 



Registration Number, if applicable 



Telephone Number 



Note: Each paper must have Its own certificate of mailing, or this certificate must Identify 
each submitted paper. 

Supplemental Information Disclosure Statement (1 page) 
Form PTO/SB/08 with Certificate of Mailing (2 pages); copies of 
references CA-CE 
Return receipt postcard 
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